#47296 [Com]: php_admin_value does not work as expected
ID: 47296
Comment by: inno dot vation at gmx dot net
Reported By: ali dot hamad at dci dot net dot sa
Status: No Feedback
Bug Type: Apache2 related
Operating System: Red Hat Enterprise Linux
PHP Version: 5.2.8
New Comment:
Seeing the same problem under 5.2.6 (opensuse 10.3 newest patches)
1)global -> works
php.ini:
disable_functions= php_uname
2) vhost -> works not
php.ini:
disable_functions=
vhost.conf:
php_admin_value disable_functions "php_uname"
----
If I proof the variants - both shows me a
"disable_functions=php_uname" relating to the code from Ali Hamad, but
only in the variant 1) it returns an warning.
I suppose that still a bug.
Regards
Inno
Previous Comments:
------------------------------------------------------------------------
[2009-02-12 01:00:00] php-bugs at lists dot php dot net
No feedback was provided for this bug for over a week, so it is
being suspended automatically. If you are able to provide the
information that was originally requested, please do so and change
the status of the bug back to "Open".
------------------------------------------------------------------------
[2009-02-05 04:20:20] ali dot hamad at dci dot net dot sa
Thank you, I will try this later this weekend and will let you know.
Ali,
------------------------------------------------------------------------
[2009-02-04 22:19:55] jani@php.net
Please try using this CVS snapshot:
http://snaps.php.net/php5.2-latest.tar.gz
For Windows:
http://windows.php.net/snapshots/
------------------------------------------------------------------------
[2009-02-04 03:28:35] ali dot hamad at dci dot net dot sa
Description:
------------
1) my disable_functions in php.ini :
disable_functions = php_uname
2) in httpd.conf , inside the vhost for the user, I have :
<Directory "/home/userName/public_html/">
<IfModule mod_php5.c>
php_admin_value disable_functions "system"
</IfModule>
</Directory>
3) Here is my code :
<?php
echo "disable_functions=".ini_get('disable_functions');
echo "<br>";
echo "php_uname=".php_uname();
echo "<br>";
?>
4) expected result :
disable_functions=system
php_uname= Linux ...etc.
5) Actual result :
disable_functions=system
php_uname=
notice, no output from php_uname and in the php error log :
[04-Feb-2009 06:08:28] PHP Warning: php_uname() has been disabled for
security reasons in ..etc
I think it is a bug since the ini_get call to disable_functions gave me
what supposed to be disabled, system function. However, php_uname, is
still disabled even if I overwrite disable_functions setting using the
php_admin_value in the user vhost.
Regards,
Ali Hamad.
------------------------------------------------------------------------
--
Edit this bug report at http://bugs.php.net/?id=47296&edit=1
Thread (4 messages)